This bug has been present since the initial import of PKINIT for 1.6.3; all later releases are affected. In particular, we should pull this up to 1.10 and 1.9 at least.